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Abstract : We address the problem of solving systems of two bivariate polynomials of total degree 
at most d with integer coefficients of maximum bitsize r. It is known that a linear separating form, 
that is a linear combination of the variables that takes different values at distinct solutions of the 
system, can be computed in OB{d^ +d7T) bit operations (where Ob refers to bit complexities and O 
to complexities where polylogarithmic factors are omitted) and we focus here on the computation 
of a Rational Univariate Representation (RUR) given a linear separating form. 
We present an algorithm for computing a RUR with worst-case bit complexity in Osid^ + d^r) 
and bound the bitsize of its coefficients by 0{d^ + dr). We show in addition that isolating boxes 
of the solutions of the system can be computed from the RUR with Osid^ + d'^r) bit operations. 
Finally, we show how a RUR can be used to evaluate the sign of a bivariate polynomial (of degree 
at most d and bitsize at most r) at one real solution of the system in Ob {d^ + d'^r) bit operations 
and at all the Q{d^) real solutions in only 0{d) times that for one solution. 
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Resolution de systemes bivaries: algorithme efRcace dans le 
pire cas pour le calcul de representations univariees 
rationnelles et applications 

Resume : Nous abordons le probleme de la resolution de systemes de deux polynomes a deux 
variables de degre total au plus d a coefficients entiers de bitsize maximale r. II est connu que 
une forme lineaire separante, c'est-a-dire une combinaison lineaire des variables qui prend des 
valeurs differentes quand elle est evaluee en des solutions (complexes) distinctes du systeme, 
peut etre calculee en Osid^ + d'^r) bits operations (ou O se refere a la complexite ou les facteurs 
polylogarithmiques sont omis et Ob se refere a la complexite binaire) et nous nous concentrons 
ici sur le calcul d'une representation univariee rationnelle (RUR) etant donne une forme lineaire 
separante. _ 

Nous presentons un algorithme pour le calcul d'une RUR de complexite Ob(c?^ + d^r) dans 
le pire cas et nous bornons la taille dc ses coefficients par 0{d^ + cir). Nous montrons en outre 
que des boites d'isolation des solutions du systeme peuvent etre calculees a partir de la RUR 
avcc Ob((P +d'^T) bits operations. Enfin, nous montrons comment une RUR pout etre utilisee 
pour evaluer le signe d'un polynome a deux variables (de degre au plus d et bitsize au plus r) en 
une solution reelle du systeme en Osid^ + d^r) bits operations et en toutes les @{d?) solutions 
reelles en seulement 0{d) fois plus que pour une solution. 

Mots-cles : calcul formel, resolution de systemes polynomiaux, representation univariee ra- 
tionnelle 
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1 Introduction 

There exists many algorithms, in the Uterature, for "solving" algebraic systems of equations. 
Some focus on computing formal solutions''^ such as rational parameterizations, Grobner bases, 
and triangular sets, others focus on isolating the solutions. By isolating the solution, we mean 
computing isolating axis-parallel boxes sets such that every real solution lies in a unique box 
and conversely. In this paper, we focus on the worst-case bit complexity of these methods (in 
the RAM model) for systems of bivariate polynomials of total degree d with integer 
coefficients of bitsize r. 

It should be stressed that formal solutions do not necessarily yield, directly, isolating boxes 
of the solutions. In particular, from a theoretical complexity view, it is not proved that the 
knowledge of a triangular system or Grobner basis of a system always simplifies the isolation of 
its solutions. The difficulty lies in the fact that isolating the solutions of a triangular system 
essentially amounts to isolating the roots of univariate polynomials with algebraic numbers as 
coefficients, which is not trivial when these polynomials have multiple roots. For recent work 
on this problem, we refer to [C GY07[ IFBM09 ] where no upper bound of complexity are given 
for the roots isolation. This difficulty also explains why it is not an easy task to define precisely 
what a formal solution of a system is, and why usage prevails in what is usually considered to 
be a formal solution. 

For isolating the real solutions of systems of two bivariate polynomials, the algorithm with 
best known bit complexity was recently analyzed by Emeliyanenko and Sagraloff |ES12) . They 
solve the problem in Ob{(P + dJr) bit operations (where O refers to the complexity where 
polylogarithmic factors are omitted and Ob refers to the bit complexity). Furthermore, the 
isolating boxes can easily be refined because the algorithm computes the univariate polynomials 
that correspond to the projections of the solutions on each axis (that is, the resultants of the two 
input polynomials with respect to each of the variables). The main drawback of their approach 
is, however, that their output (i.e., the isolating boxes and the two resultants) does not seem to 
help for performing some important operations on the solutions of the system, such as computing 
the sign of a polynomial at one of these real solutions (referred to as the sign_ at operation) , 
which is a critical operation in many problems, in particular in geometry. 

Other widespread approaches that solve systems and allow for simple sign_ at evaluations, 
are those that consist in computing rational parameterizations of the (complex) solutions. Recall 
that such a rational parameterization is a set of univariate polynomials and associated rational 
one-to-one mappings that send the roots of the univariate polynomials to the solutions of the 
system. The algorithm with the best known complexity for solving such systems via rational 
parameterizations was, in essence, first introduced by Gonzalez- Vega and El Kahoui |GVEK96| 
(see also |GVN02) ). The algorithm first applies a generic linear change of variables to the two 
input polynomials, computes a rational parameterization using the subresultant sequence of the 
sheared polynomials and finally computes the isolating boxes of the solutions. Its initial bit 
complexity of OB{d^^ + d^^r'^) was improved by Dioclmos et al. |DET091 Theorem 19] to (i) 
Os(<i^" + d^T) for computing a generic shear (i.e., a separating linear form), to (ii) Os((i^ + d^T) 
for computing a rational parameterization and to (iii) OB(rf^° + d^T) for the isolation phase with 
a modification of the initial algorithm^ 

^The complexity of the isolation phase in IDET09I Theorem 19] is stated as 0_B(rf^^ + d^^r^) but it trivially 
decreases to Osid^^ + d^r) with the recent result of Sagraloff 'Sagl2J which improves the complexity of isolating 
the real roots of a univariate polynomial. Note also that Diochnos et al. IDET09I present two algorithms, 
the M_RUR and G_RUR algorithms, both with bit complexity Ob(<1^^ + d^'^T^). However, this complexity is 
worst case only for the M_RUR algorithm. As pointed out by Emeliyanenko and Sagraloff IES12I . the G_RUR 
algorithm uses a modular gcd algorithm over an extension field whose considered bit complexity is expected. 
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Main results. We addressed in jBLPRlS] thie first phase of the above algorithm and proved 
that, given two polynomials P and Q of degree at most d and bitsize at most t, a separating 
linear form can be computed in Osid^ + d'^r) bit operations (improving by a factor d^ the 
above complexity). We suppose computed such a separating linear form and address in this 
paper the second and third phase of the above algorithm, that is the computation of a rational 
parameterization and the isolation of the solutions of the system. We also consider two important 
related problems, namely, the evaluation of the sign of a polynomial at the real solutions of a 
system and the computation of a rational parameterization of over-constrained systems. 

We first show that the Rational Univariate Representation (RUR for short) of Rouillier 
[Rou99| (i) can be expressed with simple polynomial formulas, that (ii) it has a total bitsize 
which is asymptotically smaller than that of Gonzalez- Vega and El Kahoui by a factor d, and 
that (iii) it can be computed with the same complexity, that is Osid'^ + d^r) (Theorem [5]). 
Namely, we prove that the RUR consists of four polynomials of degree at most d^ and bit- 
size 0{d^ + dr) (instead of 0{d) polynomials with the same asymptotic degree and bitsize for 
Gonzalez- Vega and El Kahoui parameterization). Moreover, we prove that this bound holds for 
any ideal containing P and Q, that is, for instance the radical ideal of (P, Q) (Proposition [T^) . 

We show that, given a RUR, isolating boxes of the solutions of the system can be computed 
with Osid^ + d'^T) bit operations (Proposition [121). This decreases by a factor d^ the best known 
complexity for this isolation phase of the algorithm (see the discussion above). Globally, this 
brings the overall bit complexity of all three phases of the algorithm to Ob [d^ + d'^r) , which also 
improves by a factor d^ the complexity. 

Finally, we show how a rational parameterization can be used to perform efficiently two 
important operations on the input system. We first show how a RUR can be used to perform 
efficiently the sign_ at operation. Given a polynomial F of total degree at most d with integer 
coefficients of bitsize at most r, we show that the sign of F at one real solution of the system can 
be computed in Osid^ -\-d'^T) bit operations, while the complexity of computing its sign at all the 
Q{d^) solutions of the system is only 0{d) times that for one real solution (Theorem [M]). This 
improves the best known complexities of Osid^^ + d^r) and Osid^^ + d^^r) for these respective 
problems (see |DET09[ Th. 14 & Cor. 24] with the improvement of | Sagl2| for the root isolation). 
Similar to the sign_ at operation, we show that a RUR can be split in two parameterizations such 
that F vanishes at all the solutions of one of them and at none of the other. We also show that 
these rational parameterizations can be transformed back into RURs in order to reduce their 
total bitsize (see above), within the same complexity, that is, Osid^ + d'^r) (Proposition [25)1 . 

The paper is organized as follows: in Section [3. 11 we present our algorithm for computing the 
RUR based on the formulas of Proposition [7| We then use these formulas in Section [5^ to prove 
new bounds on the bitsize of the coefficients of the polynomials of the RUR. The main results of 
Section [21 are summarized in Theorem [5| In Section [H we present three applications of the RUR. 
We first describe in Section an algorithm for isolating the real solutions. We then present in 
Section [4.21 an algorithm for computing the sign of a bivariate polynomial at these solutions and, 
finally, we show in Section 14.31 how a RUR can be split into rational parameterizations whose 
solutions satisfy some equality and inequality constraints. 

2 Notation and preliminaries 

We introduce notation and recall the definition of subresultant sequences and basics of complexity. 

The bitsize of an integer p is the number of bits needed to represent it, that is [logpj -I- 1 
(log refer to the logarithm in base 2). For rational numbers, we refer to the bitsize as to the 
maximum bitsize of its numerator and denominator. The bitsize of a polynomial with integer or 
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rational coefficients is tfie maximum bitsize of its coefficients. We refer to r-y as the bitsize of a 
polynomial, rational or integer 7. 

We denote by D a unique factorization domain, typically Z[X, Y], Z[X] or Z. We also denote 
by F a field, typically Q, C. For any polynomial P G ID'[-'^], let Lcx(P) denote its leading 
coefficient with respect to the variable X (or simply Lc(P) in the univariate case), dx{P) its 
degree with respect to X, and P its squarefree part. The ideal generated by two polynomials P 
and Q is denoted (P, Q), and the afhne variety of an ideal / is denoted by V{I): in other words, 
V{I) is the set of distinct solutions of the system {P, Q}. The solutions are always considered in 
the algebraic closure of the fraction field of D, unless specified otherwise. For a point a G V{I), 
/i/(cr) denotes the multiplicity of a in /. For simplicity, we refer indifferently to the ideal {P, Q) 
and to the corresponding system of polynomials. 

We finally introduce the following notation which are extensively used throughout the paper. 
Given the two input polynomials P and Q, we consider the "generic" change of variables X = 
T - SY, and define the "sheared" polynomials P{T - SY, Y),Q{T - SY, Y), and their resultant 
with respect to F, 

i?(r, S) = ResY{P{T - SY, Y),Q{T - SY, Y)). (1) 

Let Lji{S) be the leading coefficient of R{T, S) seen as a polynomial in T. Let Lp{S) and Lq{S) 
be the leading coefficients of P{T — SY,Y) and Q{T — SY,Y), seen as polynomials in Y; it is 
straightforward that these leading coefficients do not depend on T. In other words: 

Lp{S) ^ Lcy{P{T - SY,Y)), Lq{S) = Lcy{Q{T ^ SY,Y)) 
Ln{S)^LcT{R{T,S)) 



Complexity. We recall some complexity bounds. In the sequel, we often consider the gcd of 
two univariate polynomials P and Q and the gcd-free part of P with respect to Q, that is, the 
divisor D oi P such that P = gcd(P, Q)D. Note that when Q = P' , D is the squarefree part P 
of P. 

Lemma 1 r |BPR06l Corollary 10.12 & Remark lO.lojl). Two polynomials P, Q in Z[X] with 
maximum degree d and bitsize at most t have a gcd in 'L\X\ with coefficients of bitsize in 0{d+T) 
which can be computed with Osid^T) bit operations. The same bounds hold for the bitsize and 
the computation of the gcd-free part of P with respect to Q. 

The following is a refinement of the previous lemma for the case of two polynomials with 
different degrees and bitsizes. It is a straightforward adaptation of |LR01[ Corollary 5.2] and it 
is only used in Section 

^ |BPR06I Corollary 10.12] states that P and Q have a gcd in I.[X] with bitsize in 0((i + r). IBPR06I Remark 
10.19] claims that a gcd and gcd-free parts of P and Q can be computed in OB(d^T) bit operations. This remark 
refers to ILROl) Corollary 5.2] which proves that the last non-zero Sylvester-Habicht polynomial, which is a gcd 
of P and Q |iBPR06 . Corollary 8.32], can be computed in OB{d?T) bit operations. Moreover, the corollary proves 
that the Sylvester-Habicht transition matrices can be computed within the same bit complexity, which gives 
the cofactors of P and Q in the sequence of the Sylvester-Habicht polynomials (i.e., Ui,Vi S such that 

UiP + ViQ is equal to the i-th Sylvester-Habicht polynomials). The gcd-free part of P with respect to Q and 
conversely are the cofactors corresponding to the one-after-last non-zero Sylvester-Habicht polynomial IBPR06I 
Proposition 10.14], and can thus be computed in Os(d^T) bit operations. The gcd (resp. gcd-free part) of P and 
Q computed this way is in Z[X], thus dividing it by the gcd of its coefficients yields a gcd (resp. gcd-free part) of 
P and Q of smallest bitsize in Z[X] which is known to be in 0{d + r). The gcd of the coefficients, which are of 
bitsize 0{dT) IBPR06I Proposition 8.46], follows from 0{d) gcds of two integers of bitsize O^dr) and each such 
gcd can be computed with OBidr) bit operations |YapOO| §2. A. 6]. Therefore, a gcd (resp. gcd-free part) of P 
and Q of bitsize 0{d + r) can be computed in OB{d'^T) bit complexity. 
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Lemma 2 ( jLROlp ). Let P and Q he two polynomials in Z[X] of degrees p and q and of bitsizes 
Tp and TQ, respectively. A gcd of P and Q of bitsize 0(min(p + Tp,q + tq)) in 'I\X\, can be 
computed in (max(p, q)(pTQ + (7Tp)) hit operations. A gcd-free part of P with respect to Q, of 
bitsize 0{p + Tp) in 7L\X\, can be computed in the same bit complexity. 

We now state a bound on the complexity of evaluating a univariate polynomial which ought 
to be known, even though we were not able to find a proper reference to it. For completeness, 
we provide a very simple proof. 

Lemma 3. Let a be a rational of bitsize Ta, the evaluation at a of a univariate polynomial f of 
degree d and rational coefficients of hitsize t can be done in OB{d{T + Ta)) hit operations, while 
the value f{a) has bitsize in 0{t + dTa). 

Proof. The complexity OB{d{T + To)) can easily be obtained by recursively evaluating the 
polynomial X]f=o'^i^* Yli=o^i^^ + ^'^^'^^i=i'^i+d/2X^- Evaluating x'^^'^ can be done in 
Ob [dTa \og^ dTa) time by recursively computing log | multiplications of rational numbers of bit- 
size at most dTa, each of which can be done in Ob (dra log dra log log dra) time by Schonhage- 
Strassen algorithm (see e.g. ^vzGGQQ. Theorem 8.24]. X]i'=o '^i+d/2 a* has bitsize at most dTa + T, 
hence its multiplication with a'^/^ can be done in OB((dTa +r) \o^{dTa+T)) time. Hence, the to- 
tal complexity of evaluating / is at most T{d, T,Ta) = 2T(d/2, t, Ta) + OB{{dTa+T) log"^ (dra + r)) 
which is iiH OB{d{Ta + r) log''(dra + r)) that is in dB{d{Ta + t)). □ 

Lemma 4 ff BLPRlBl Lemma 5]). Let P and Q in %\X,Y\ be of total degree at most d and 
maximum hitsize t . The sheared polynomials P{T — SY, Y) and Q(T — SY, Y) can he expanded 
in OB(d^ + d"^T) and their hitsizes are in 0{d + t). The resultant R{T, S) can he computed in 
©^(d^ + d^r) hit operations and O(d^) arithmetic operations in I; its degree is at most 2d^ in 
each variable and its hitsize is in 0{d^ + dT). 



3 Rational Univariate Representation 

The idea of this section is to express the polynomials of a RUR of two polynomials in terms of a 
resultant defined from these polynomials. Given a separating form, this yields a new algorithm 
to compute a RUR and it also enables us to derive the bitsize of the polynomials of a RUR. 
In Section 13.11 we prove these expressions for the polynomials of a RUR and present the corre- 
sponding algorithm. We prove the bound on the bitsize of the RUR in Section [ST^ These results 
are summarized in Theorem El 

Throughout this section we assume that the two input polynomials P and Q are coprime in 
Y], that their maximum total degree d is at least 2 and that their coefRcients have maximum 
bitsize r. 

3 The algorithm in ILROll uses the well-known half-gcd approach to compute any polynomial in the Sylvester- 
Habicht and cofactors sequence in a soft-linear number of arithmetic operations, and it exploits Hadamard's 
bound on determinants to bound the size of intermediate coefficients. When the two input polynomials have 
different degrees and bitsizes, Hadamard's bound reads as 0{ptq + qrp) instead of simply 0{dT) and, similarly 
as in Lemma[T] the algorithm in |:LR01 yields a gcd and gcd-free parts of P and Q in OB(max(p, q){'pTQ + QTp)) 
bit operations. Furthermore, the gcd and gcd-free parts computed this way are in with coefficients of bitsize 

0(j>TQ + QTp), thus, dividing them by the gcd of their coefficients can be done with Os(max(p, g)(pTQ -|- qTp)) 
bit operations and yields a gcd and gcd-free parts in Z[X] with minimal bitsize, which is as claimed by Mignotte's 
bound (see e.g. IBPR06I Corollary 10.12]). 

"Indeed, T{d,T,Ta) = 2'+^T(^,T,Ta) + OB({dTa + T)log^{dra + r) + ...+2'{.^Ta+T)\og>{^Ta+T)) 
^Ob {dTa log3 {dTa +T)logd + T log^ (dTa + t) Yl^^^^ 2' ) 
^ OB{d{Ta + r) log-* (dTa + t)). 
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We first recall the definition and main properties of Rational Univariate Representations. In 
the following, for any polynomial v E Q[X, Y] and a — (a, /3) S C^, we denote by v{a) the image 
of a by the polynomial function v (e.g. X{a, /3) = a). 

Definition 5 f |Rou99| ). Let I C Q[X, F] be a zero- dimensional ideal, V{I) = {cr G C^,u((t) = 
0,\/v G /} its associated variety, and a linear form T = X -\- aY with a G Q. The RUR-candidate 
of I associated to X+aY ( or simply, to a ), denoted RU Ri^a, is the following set of four univariate 
polynomials in Q[T] 

hAT)= n (r-x(a)-ar(a)r(-) 

'^^^'^^ (3) 
fi,aAT)= l'i('^H^) n (T-X{^)-aY{^)), forve{l,X,Y} 

where, for a G ViX), t^iio) denotes the multiplicity of a in I. If {X,Y) i— > X + aY is injective 
on V{I), we say that the linear form X + aY separates V{I) ( or is separating for I ) and RU Ri^a 
is called a RUR (the RUR of I associated to a) and it defines a bijection between V{I) and 
V{fi.a)^{ieCJiAl) = 0}: 

V{I) V{fl,a) 

{a, (3) ^ a + a/S 

( fl,a,X , ^ fl,a,Y , \ ^ 

-r^(7),y — (7) ^ 7 

V Jl,a,\ JI,aS J 

Moreover, this bijection preserves the real roots and the multiplicities. 

We prove in this section the following theorem on the RUR of two polynomials. We state it 
for any separating linear form X + aY with integer a of bitsize 0(1) with the abuse of notation 
that polylogarithmic factors in d and r are omitted. Note that it is known that there exists a 
separating form X + aY with a positive integer a < and that such a separating form can 
be computed in Osid^ + d'^r) bit operations [BLPR13) . This theorem is a direct consequence of 
Propositions [5] and [T^ 

Theorem 6. Let P,Q£ 1\X, Y\ be two coprime bivariate polynomials of total degree at most d 
and maximum bitsize r. Given a separating form X + aY with integer a of bitsize 0(1), the RUR 
of {P, Q) associated to a can be computed using Proposition^^ with OB{d^ + d^r) bit operations. 
Furthermore, the polynomials of this RUR have degree at most d^ and bitsize in 0{d^ + dr). 



3.1 RUR computation 

We show here that the polynomials of a RUR can be expressed as combinations of specializa- 
tions of the resultant R and its partial derivatives. The seminal idea has already been used by 
several authors in various contexts (see e.g. |Can87[ fABRW96l ISchOl| ) for computing rational 
parameterizations of the radical of a given zero-dimensional ideal and mainly for bounding the 
size of a Chow form. Based on the same idea but keeping track of multiplicities, we present a 
simple new formulation for the polynomials of a RUR, given separating form. 

Proposition 7. For any rational a such that Lp{a)LQ{a) ^ and such that X + aY is a 
separating form of I = (P, Q) , the RUR of (P, Q) associated to a is as follows: 

f R{T,a) f'i,a{T) 

JImX ) ^ t I \ fl.a.lH) 



Lnia) '''''''' ' gcdif I AT) J'ljT)) 

^{T,a) - fi a{T)^^{a) 

fl,ax{T) = , - ' ,/ . '/rpN r, 77^ fl,a,x{T) = Tfi^aA^) - drif I ,a) f I ,a{T) ~ afl^a,Y{T). 

Lji(a) gcd(//,a(-t j, 7 /,o(J )) 
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We postpone the proof of Proposition[7]to Sectioii lB.l.ll and first analyze the complexity of the 
computation of the expressions therein. Note that a separating form X + aY as in Proposition [7] 
can be computed in Osid^ + d'^r) |BLPR13| . 

Proposition 8. Computing the polynomials in Proposition\^ can he done with Osid'^ +d^{T+Ta)) 
bit operations, where Ta is the bitsize of a. 

Proof of Proposition [3 According to LemmaH the resultant R(T, S) of P{T-SY, Y) and Q{T- 
SY, Y) with respect to Y has degree 0{d^) in T and S, has bitsize in 0{d{d + T)), and that it can 
be computed in Osid^id + r)) bit operations. We can now apply the formulas of Proposition [7] 
for computing the polynomials of the RUR. 

Specializmg R{T,S) at S — a can be done by evaluatmg 0{d^) polynomials in S, each of 
degree in 0{d^) and bitsize in 0{d^ + dr). By Lemma [31 each of the 0{d^) evaluations can be 
done in OsidPid^ + dr + To)) bit operations and each result has bitsize in Oid? + dr + d^Ta). 
Hence, R{T,a) and fi.a{T) have degree in 0{d^), bitsize in 0{d^ + dr + d^Ta), and they can be 
computed with Osid'^id^ + dr + Ta)) bit operations. 

The complexity of computing the numerators of fi^a,i{T) and fi^a,Y{T) is clearly dominated 
by the computation of ^(T, a). Indeed, computing the derivative ^{T, S) can trivially be done 
in 0((i^) arithmetic operations of complexity Osid^ + dr), that is in Osid^ + d^r). Then, as 
for i?(T,a), ff (T,a) has de gree in Oid?), bitsize in 0{d^ + dr + d^Ta), and it can be computed 
within the same complexity as the computation of R{T, a). 

On the other hand, since fi^a{T) and f'j ^(T) have degree in 0{d^) and bitsize in 0{d^ +dT + 
d^Ta): and fi^a{T) = ^^^a) ' '^^^ ^^^^ multiply these two polynomials by Lji{a) which is of bitsize 

0{d^ + dr + d'^Ta) and by the denominator of the rational a to the power of ds{R{T, S)) which is 
an integer of bitsize in 0{d^Ta), to obtain polynomials with coefficients in Z. Hence, according 
to Lemma [U the gcd of fi^a{T) and f'j a{T) can be computed in Osid'^id^ + dr + d'^Ta)) bit 
operations and it has bitsize in 0{d^ + dr + d'^Ta). 

Now, the bit complexity of the division of the numerators by the gcd is of the order of the 
square of their maximum degree times their maximum bitsize |vzGG99l Theorem 9.6 and subse- 
quent discussion], that is, the divisions (and hence the computation of fi.a.i{T) and fi^a,Y{T)) 
can be done in Osid'^id^ + dr + d'^Ta)) bit operations. 

Finally, computing fi,a.x{T) can be done within the same complexity as for fi^a,i{T) and 
fi,a,Y{T) since it is dominated by the computation of the squarefree part of fi^a{T), which can 
be computed similarly and with the same complexity as above, by Lemma [1] 

The overall complexity is thus that of computing the resultant which is in Osid^id + T)) plus 
that of computing the above gcd and Euclidean division which is in Osid'^id'^ +dT + d'^Ta)). This 
gives a total of Ob (d"^ + d^(T + ra)). □ 

3.1.1 Proof of Proposition [7] 

Proposition [7] expresses the polynomials fj^a and fi^a,v of a RUR in terms of specializations (by 
S* = a) of the resultant R{T, S) and its partial derivatives. Since the specializations are done after 
considering the derivatives of R, we study the relations between these entities before specializing 
S by a. 

For that purpose, we first introduce the following polynomials which are exactly the polynomi- 
als fi.a and fi^a,v of ^ where the parameter a is replaced by the variable S. These polynomials 
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can be seen as the RUR polynomials of the ideal / with respect to a "generic" linear form X + SY. 

''''''' (4) 
fiAT.S)^ f^ii'^H'y) n {T-X{<;)-SY {<;)), ve{l,X,Y}. 

a(EV{I) <,-eV(/),<;#o- 

These polynomials are obviously in C[T, S], but they are actually in Q[T, S] because, when S is 
specialized at any rational value a, the specialized polynomials are those of RURj^a which are 
known to be in Q[T] (see e.g. |Rou99| ). 

Before proving Proposition [71 we express the derivatives of //(T, S) in terms of fi^y(T, S), in 
Lemma[21 and show that //(T, S) is the monic form of the resultant R{T, S), seen as a polynomial 
in T, in Lemma [TT] 

Lemma 9. Let gi(T,S) = n^gy(j)(r - X{a) - SYia))''''^"''-'^ . We have 

^{T,S)^gi{T,S)fiAT,S), (5) 

^{T,S)^gi{T,S)fi^YiT,S). (6) 

Proof. It is straightforward that the derivative of // with respect to T is '^a-^v{i) ~ 
X{a)-SY{a)Y'^''^-^ X\<i^v[i),<i^a^T^ -^{'-)^S^'k^)Y'''''^ ^ which can be rewritten as the product 
of n.6y(/) {T ^X{a)- SY{a)Y'(-)-^ and E.ey(z) l^i{^) Yl.^vnu^AT -X{,)- SY{,)) which 
is exactly the product of gi{T, S) and fj^i{T, S). 

The expression of the derivative of // with respect to S is similar to that with respect to T 
except that the derivative of T — X{(t) — SY{(t) is now Y{(t) instead of 1. It follows that 

is the product of n.6y(/)(^ " ^(^) " and E.evii) 1^i{^)Y{ct) U,ev(iu^aiT - 

X{<;) - SY{^)) which is the product of gi{T, S) and //,y(T, S). □ 

For the proof of Lemma [TTl we will need the following lemma which states that when two 
polynomials have no common solution at infinity in some direction, the roots of their resultant 
with respect to this direction are the projections of the solutions of the system with cumulated 
multiplicities. 

Lemma 10 f jBKMOSl Prop. 2 and 5]). Let P,Q Q ¥[X,Y] defining a zero- dimensional ideal 
I — {P,Q), such that their leading terms Lcy{P) and Lcy{Q) do not have common roots. Then 
ResY{P,Q) = c J^^gy^j-)(X — X((t))^^'^'^^ where c is nonzero in¥. 

The following lemma links the resultant of P{T — SY, Y) and Q{T — SY, Y) with respect to 
Y and the polynomial //(T, S) as defined above. 

Lemma 11. R{T,S) — Lij{S)fi{T,S) and, for any a £ Q, Lp{a)LQ{a) ^ implies that 
LR{a)^ 0. 

Proof. The proof is organized as follows. We first prove that for any rational a such that 
Lp{a)LQ{a) does not vanish, R{T,a) — c{a)fi{T,a) where c(a) e Q is a nonzero constant 
depending on a. This is true for infinitely many values of a and, since R(T, S) and fi{T, S) are 
polynomials, we can deduce that R{T,S) — Lfi{S)fi{T,S). This will also implies the second 
statement of the lemma since, if Lp{a)LQ{a) ^ 0, then R{T,a) — c{a)fi{T,a) — L]i{a)fi{T,a) 
with c(a) ^ 0, thus Lp^a) ^ (since //(T, a) is monic). 
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If a is such that Lp{a)Lq{a) ^ 0, the resultant R(T,S) can be speciahzed at 5 = a, in the 
sense that R{T, a) is equal to the resultant of P{T — aY, Y) and Q{T ~ aY, Y) with respect to 
y |BPR06[ Proposition 4.20]. 

We now apply Lemma [TOl to these two polynomials P{T—aY, Y) and Q{T — aY, Y). These two 
polynomials satisfy the hypotheses of this lemma: first, their leading coefficients (in Y) do not 
depend on T, hence they have no common root in Q[T]; second, the polynomials P{T — aY, Y) 
and Q{T — aY,Y) are coprime because P(X,Y) and Q{X,Y) are coprime by assumption and 
the change of variables {X, Y) i-^ {T — X + aY, Y) is a one-to-one mapping (and a common 
factor will remain a common factor after the change of variables). Hence Lemma [10] yields that 
R{T,a) — c{a) W^^y^j -^(T — T{a))^''^'^'^\ where c(a) g Q is a nonzero constant depending on a, 
and la is the ideal generated by P(T - aY, Y) and Q{T ~ oY, Y). 

We now observe that Y{^^y^^i^){T - T{(t)Y'-^'''^ is equal to //(T, a) = no-ey(/)(^ - ^(^) ~ 
aY{a))^''^'''> since any solution (a, /3) olP{X, Y) is in one-to-one correspondence with the solution 
(a-l-a/?, /?) of P{T—aY, Y) (and similarly for Q) and the multiplicities of the solutions also match, 
i.e. fii{<7) — ^i^{aa) when a and ctq are in correspondence through the mapping [FulOSi §3.3 
Proposition 3 and Theorem 3]. Hence, 

Lp{a)LQ{a)^Q R{T, a) ^ c{a)fi{T, a) with c(a) ^ 0. (7) 

Since there is finitely many values of a such that Lp{a)LQ{a)L]i(a) = and since fi{T, S) is 
monic with respect to T, ([7]) implies that R{T, S) and fi{T, S) have the same degree in T, say 
D. We write these two polynomials as 

D-1 D-1 

R{T, S) = Lr{S)T° + ^^iS)T\ fj{T, 5) = + ^ MS)T\ (8) 

1=0 1=0 

If a is such that Lp{a)LQ{a)Lii{a) 7^ 0, ([7]) and ([8]) imply that Lp{a) = c{a) and ri(a) = 
Lp(a)fi{a), for all i. These equalities hold for infinitely many values of a, and ri(S), Lp(S) and 
f,iS) are polynomials in S, thus r,iS) = LR{S)f,{S) and, by ®, i?(r, S) = Lr{S)Ji{T, S). □ 

We can now prove Proposition [T] which we recall, for clarity. 

Proposition [7] For any rational a such that Lp[a)LQ[a) ^ and such that X + oY is a 
separating form of I — {P, Q), the RUR of (P, Q) associated to a is as follows: 

r frp. R{T,a) f'i,a{T) 

fl,a{^ I = T f \ fl,a,l{l)^ 



LR{a) •'^•"•^^ ' gcdif Pain f'ljT)) 

^[T,a)~fpa{T)^{a) 
Lnia) gcdif i,aiT),f'jjT)) 



fl.aAT) = as(^'°) y ^ Tfj,aAT) - dT{fl,a)17jT) - afj,a,Y{T). 



Proof. Since we assume that a is such that Lp{a)LQ{a) ^ 0, Lemma [TT] immediately gives the 
first formula. 

Equation [Estates that fpi{T,S)gi[T,S) = where gi{T,S) ^ Uaev(i)(^ ~ ^(^) - 

S'r(f7))'^^ In addition, gj being monic in T, it never identically vanishes when S is spe- 
cialized, thus the preceding formula yields after specialization: //,q,i(T) — ^^j^^- Furthermore, 
5/(T,a) = gcd{ f I AT), f'jjT)). Indeed, //,a(T) = Uaevii)iT " X{<j) -aY{a)r'(-^ and all 
values X{a) + aY{a), for a £ V{I), are pairwise distinct since X + aY is a separating form, thus 
the gcd of //,a(T) and its derivative is Ua€Vii)(T - X{a) - aY{a)y''^"'>~^ , that is gi(T,a). This 
proves the formula for //,a,i- 
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Concerning the third equation, Lemma [TTI together with Equation [5] imphes: 

dfi(T,S) diR{T,S)/LR{S)) aR(T,S) j ( q\ r,(rp q\dLR(S) 
f fr = 85 ^ dS ^ as ^fllJj JJ 95 

Ji,Y[ ^^^r^^g^ ^^^^^ g^ Ln{Sygj{T,S) 

dRjT.S) f irj. Q\dLnXS} 
^ dS 

LRiS)gi{T,S) 

As argued above, when speciahzed, gi{T,a) — gcd(//.a(T), /| ^((T)) and it does not identically 
vanish. By Lemma [TTI Luia) does not vanish either, and the formula for fi^a,Y follows. 

It remains to compute fi.a.x- Definition [S] implies that, for any root 7 of fi ^'- 7 = '^^'"'^ (7) + 

o-jff^il)^ and thus fi.a,x{l) + afi^a,Y{j) - lfi,a,i{l) = 0. Replacing 7 by T, we have that the 
polynomial fi.a.x{T) + afi^a,Y{T) — Tfi^a,i(T) vanishes at every root of //,a, thus the squarefree 
part of fi^a divides that polynomial. In other words, fi,a,x{T) = Tfj^a,i{T) — afi^a,Y{T) mod 
fiAT)- We now compute Tfi^aAT) and afi^a,Y{T) modulo JTjT). 

Equation ^ implies that fi,a,v{T) is equal to T*^*^^)"^ 'J2crev{i) P-^^^ some terms 

of lower degree in T, and that the degree of fi.a{T) is jfV{I) (since X + aY is a separating form). 
First, for v ~ Y , this implies that dT{fi,a,Y) < dT{fi,a), and thus that afi,a.Y{T) is already 
reduced modulo fi,a{T). Second, for v — 1. ^^a-evii) f^ii'^) nonzero and equal to dxifi^a)- 
Thus, Tfi^a,i{T) and fi^T) are both of degree ^V{I), and their leading coefficients are dT{fiA 
and 1, respectively. Hence Tfi^aAT) mod //,,(T) = Tfi^aAT) - drif iAfiAT)- We thus 
obtain the last equation, that is, fi,a,x{T) = Tfi^a,i{T) " drifiAfiAT) - afi,a,Y{T). □ 



3.2 RUR bitsize 

We prove here, in Proposition[T^ a new bound on the bitsize of the coefficients of the polynomials 
of a RUR. This bound is interesting in its own right and is instrumental for our analysis of the 
complexity of computing isolating boxes of the solutions of the input system, as well as for 
performing sign_at evaluations. We state our bound for RUR- candidates, that is even when 
the linear form X + oY is not separating. We only use this result when the form is separating, 
for proving Theorem [51 but the general result is interesting in a probabilistic context when a 
RUR-candidate is computed with a random linear form. We also prove our bound, not only for 
the RUR-candidates of an ideal defined by two polynomials P and Q, but for any ideal of Z[X, Y] 
that contains P and Q (for instance the radical of (P, Q) or the ideals obtained by decomposing 
(P, Q) according to the multiplicity of the solutions). 

Proposition 12. Let P,Q£ Z[X, Y] be two coprime polynomials of total degree at most d and 
maximum bitsize t, let a be a rational 0/ bitsize Ta, and let J be any ideal oJl^X^Y] containing 
P and Q. The polynomials of the RUR-candidate of J associated to a have degree at most d^ 
and bitsize in 0{d^Ta + dr). Moreover, there exists an integer of bitsize in 0{d^Ta + dr) such 
that the product of this integer with any polynomial in the RUR-candidate yields a polynomial 
with integer coefficients^ 

Before proving Proposition [T^l we prove a corollary of Mignotte's lemma stating that the 
bitsize of a factor of a polynomial P with integer coefficients does not differ much than that of P. 
We also recall a notion of primitive part for polynomials in Q[X, Y] and some of its properties. 

^In other words, the mapping 7 ( /^j" '^ (t)' ^ ] 'A\ ('^)) ^sliding the solutions of fj^a{T) to those of J (see 

Definition[5j can be defined with polynomials with integer coefficients of bitsize 0{d?Ta-{-dT). This will be needed 
in the proof of Lemma 1211 
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Lemma 13 (Mignotte). Let P e Y] be of degree at most d in each variable with coefficients 
bitsize at most t. If P — Q1Q2 with Qi, Q2 in 1j\X^Y\, then the bitsize of Qi, i = 1,2, is 
in d{d + T). 

Proof. A polynomial can be seen as the vector of its coefficients and we denote by the L*^ 

norm of P. Mignotte lemma |Mig89[ Theorem 4bis p. 172] states that ||(5i||i||(32||i s% 2'^'^\\P\\2. 



One always has ||(5i||oo ^ IIQilli ^^'^ since the polynomials have integer coefficients, 1 ^ \\Qi 
Thus IIQj Iloo ^ S^'^ll-Plb and log||Qj ||oo ^ 2d + log ||P||2. Thus, by definition, the bitsize of 
is [log IIQjIlcxjJ + 1 ^ 2(i + 1 + log ||-P||2- Since P has degree at most d in each variable, it has 
at most {d + 1)^ coefficients which are bounded by 2'^ , thus ||P||2 < + 1)^2'^^ which yields 
that the bitsize of Qj is less than 2d + 1 + \og{d + 1) + r. □ 



Primitive part. Consider a polynomial P in Q[X, y] of degree at most d in each variable. It 
can be written P = X]i'j=o j^^X'^Y^ with Oij and bij coprime in Z for all i,j. We define the 
primitive part of P, denoted pp{P), as P divided by the gcd of the and multiplied by the least 
common multiple (1cm) of the bij . (Note that this definition is not entirely standard since we do 
not consider contents that are polynomials in X or in Y.) We also denote by rp the bitsize of P 
(that is, the maximum bitsize of all the a.y and bij). We prove three properties of the primitive 
part which will be useful in the proof. 

Lemma 14. For any two polynomials P and Q in Q[X,Y], we have the following properties: 
(i) pp{PQ) = pp{P)pp{Q). (ii) If P is monic then Tp ^ TppiP) and, more generally, if P has 
one coefficient, ^, of bitsize r^, then Tp ^ + Tp,p(^py (Hi) If P has coefficients in Z, then 

Proof. Gauss Lemma states that if two univariate polynomials with integer coefficients are primi- 
tive, so is their product. This lemma can straightforwardly be extended to be used in our context 
by applying a change of variables of the form X'^Y^ — > with k > 2 max((iy(P), dy (Q)). 

Thus, if P and Q in Q[X, Y] are primitive (i.e., each of them has integer coefficients whose com- 
mon gcd is 1), their product is primitive. It follows that pp{PQ) = pp{P) pp{Q) because, writing 
P = app{P) and Q — (3pp{Q), we hme pp{PQ) = pp{app{P) l3pp{Q)) = pp{pp{P) pp{Q)) which 
is equal to pp(P) pp{Q) since the product of two primitive polynomials is primitive. 

Second, if P G Q[X, Y] has one coefficient, ^, of bitsize r^, then Tp ^ + Tpp(^py Indeed, We 
have P = ^-^ thus rp ^ t^ + tp_. Since has one of its coefficients equal to 1, its primitive part is 
Y multiplied by an integer (the 1cm of the denominators), thus tp ^ Tpp^p-^ and pp{^) — PP{P) 
by definition, which implies the claim. 

Third, if P has coefficients in Z, then Tpp(^p) rp since pp{P) is equal to P divided by an 
integer (the gcd of the integer coefficients). □ 

The idea of the proof of Proposition [T^ is. for J ^ I = {P, Q) , to first argue that polynomial 
/j, that is the first polynomial of the RUR-candidate before specialization at 5 = a, is a factor of 
// which is a factor of the resultant R{T, S) by Lemma [TTl We then derive a bound of 0{d^ + dr) 
on the bitsize of fj from the bitsize of this resultant using Lemma [T21 The bound on the bitsize 
of the other polynomials of the non-specialized RUR-candidate of J follows from the bound on 
fj and we finally specialize all these polynomials a.t S — a which yields the result. We decompose 
this proof in two lemmas to emphasize that, although the bound on the bitsize of fj uses the 
fact that J contains polynomials P and Q, the second part of the proof only uses the bound on 
fj- 
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Lemma 15. Let P,Q ^ 1i[X,Y] be two coprime polynomials of total degree at most d and 
maximum bitsize t, and J be any ideal of Ij[X,Y] containing P and Q. Polynomials fj{T,S) 
(see ) and its primitive part have bitsize in 0{d^ +dT) and degree at most d^ in each variable. 

Proof. Consider an ideal J containing / — {P, Q). Counted with multiplicity, the set of solutions 
of J is a subset of those of I thus, by Equation polynomial fj{T,S) is monic in T and 
fj(T,S) divides //(T,^). Furthermore, //(T,5) divides R{T,S) by Lemma E] Thus /j(r,5) 
divides R{T,S) and we consider h G Q[T, S*] such that fjh — R. Taking the primitive part, we 
have pp{fj) pp{h) — Pp{R) by Lemma UM The bitsize of pp{R) is in 0{d^ + dr) because R is 
of bitsize 0{d^ + dr) (Lemma 2]) and, since R has integer coefficients, Tpp/^jp) ^ '''R fLemma ll4p . 
This implies that pp{fj) also has bitsize in 0{d^ + c?r) by Lemma [T51 because the degree oi pp{R) 
is in 0{d^) (Lemma [4]). Furthermore, since fj{T,S) is monic in T, t/j ^ '''pp(fj) (Lemma [14]) 
which implies that both fj and its primitive part have bitsize in 0{d^ + dT). Finally, the number 
of solutions (counted with multiplicity) of (P, Q) is at most by the Bezout bound, and this 
bound also holds for J 3 (P, Q) . It then follows from Equation (|4]) that fj has degree at most 
d^ in each variable. □ 

Lemma 16. Let J be any ideal such that polynomials fj{T,S) (see ^) and its primitive part 
have degree 0{d^) and bitsize in 0{d^ + dr) and a is a rational of bitsize Ta. Then all the 
polynomials of the RUR-candidate RURj^a have bitsize in 0{d^Ta +dT). Moreover, there exists 
an integer of bitsize in 0{d^Ta + dr) such that its product with any polynomial in the RUR- 
candidate yields a polynomial with integer coefficients. 

Proof. Bitsize of fj_y, v G {l,y}. We consider the equations of Lemma |^ which can be written 
as ^{T,S) = gj(T,S)fj^i,{T,S) where m is T or S, and u is 1 or Y, respectively. We first 
bound the bitsize of one coefficient, ^, of fj^v so that we can apply Lemma [HI which states that 
'''/./ V ^ '^i'^^ppifi v)- consider the leading coefficient ^ of /j „ with respect to the lexicographic 
order {T,S). Since gj is monic in T (see Lemma [3]), the leading coefficient (with respect to the 
same ordering) of the product gjfj^v = is £. which thus has bitsize in 0{Tfj) (since it is 
bounded by Tf j plus the log of the degree of fj). It thus follows from the hypothesis on Tfj that 
Vj.. is in 0(d2 + dr + Tppi^jj^^))- 

We now take the primitive part of the above equation (of Lemma[5|) , which gives pp( (T, S)) = 
pp{gj{T,S)) pp{fj^y{T,S)). By Lemma [131 Tpp(f.,.^) is in 0(d^ + r^^^att^)- In order to bound 

the bitsize oi pp{^^), we multiply by the 1cm of the denominators of the coefficients of fj, 
which we denote by Icm/^. Multiplying by a constant does not change the primitive part and 
Icm/j has integer coefficients, so the bitsize of pp{^^) — PPi^cmf, ^■) is thus at most that 
of Icuif j which is bounded by the sum of the bitsizes of Icm^^ and By hypothesis, the 
bitsize of fj is in 0{d'^ + dr) so the bitsize of is also in 0{d^ + dr). On the other hand, since 
fj is monic (in T), /,/ Icm/, = pp{fj) and Ticm/^ ^ '''ppU i) which is in 0{d^ + dT) by hypothesis. 
It follows that Tppi^f J ^) and r/j„ are also in 0{d^ + dr) for v £ {1,1"}. 

Bitsize of fj^x ■ We obtain the bound for by symmetry. Similarly as we proved that fj y 
has bitsize in 0{d^ + dr), we get, by exchanging the role of X and Y in Equation Q and 
LemmaM that EaGy(J) Mj('7)^(ct) U,ev(J),,^AT - Yi'^) " SX{<;)) has bitsize in 0(^2 + dr). 
This polynomial is of degree 0{d^) in T and S, by hypothesis, thus after replacing 5" by ^ and 
then T by ^, the polynomial is of degree 0{d^) in T and ^. We multiply it by S to the power 
of ^ and obtain fj^x which is thus of bitsize 0{d^ + dr). 



RR n° 8262 



14 



Bouzidi & hazard & Pouget & Rouillier 



Specialization at S ^ a. To bound the bitsize of the polynomials of RURj^a (Definition [5|) , it 
remains to evaluate the polynomials fj and v G {1,X, 1"}, at the rational value S ~ a 
of bitsize Ta- Since these polynomials have degree in S in 0{d'^) and bitsize in 0{d^ + dr), 
it is straightforward that their specializations at 5' = a have bitsize in 0{d^ + dr + d'^Ta) = 
d{d^Ta + dT). 

The 1cm of the denominators of all the coefficients in the polynomials of RU Rj^a has bitsize 
0{d^Ta+dT) . We have already argued that Icm/^ , the 1cm of the denominators of the coefficients 
of /j, is in 0{d^ + dr). For each of the other polynomials fj^y, v G {1,X, F}, denote by Icm/^^ 
and gcd^^^ the 1cm of the denominators of its coefficients and the gcd of their numerators. By 

definition, pp{fj,v) = —^^^fj.v Let c be any coefficient of pp(fj^v) & Z[S', T] and ^ be the 
corresponding coefficient of fj,^ G Q[S', T] (with a and b coprime integers); we have Icm/^ = 
c^gcd^j^ ^ cb since gcdy^^ divides a. It follows that Ticm^^ ^ '''pp(fjv) '^'''fjv which are both in 
0{d^ + dr), as proved above. Hence the 1cm of the denominators of all the coefficients in RU Rj,a 
has bitsize 0{d^ + dr). Finally, since all these polynomials have degree O(d^), when specializing 
by iS" = a, the bitsize of the denominators of the coefficients of the polynomials increase by at 
most 0{d^Ta) and thus the bitsize of their 1cm also increases by at most 0{d^Ta), which concludes 
the proof. □ 

Proof of Proposition]!^ By Lemma [T51 /,/ has degree at most d^ in each variable, so has 
V G {1, Y} by Equation (0]). It follows from Equation ^ that all the polynomials of any RUR- 
candidate of J have degree at most d^ . The rest of the proposition is a corollary of Lemmas [13] 
and [161 □ 



4 Applications 

We present three applications enlightening the advantages of computing a RUR of a system. 
The first one is the isolation of the solutions, that is computing boxes with rational coordinates 
that isolate the solutions. The second one is the evaluation of the sign of a bivariate polyno- 
mial at a real solution of the system. Finally, we address the problem of computing a rational 
parameterization of a system defined by several equality and inequality constraints. In all these 
applications, we take advantage of the RUR to transform bivariate operations on the system into 
univariate operations. We assume that the polynomials of the RURs satisfy the bitsize bound of 
Theorem |51 

We start by recalling the complexity of isolating the real roots of a univariate polynomial. 
Here, / denotes a univariate polynomial of degree d with integer coefficients of bitsize at most r. 

Lemma 17 ( |Sagl2| ^ Theorem 100). Let f be squarefree. The bit complexity of isolating all the 
real roots of f is in OB(d^T). Then, the bit complexity of refining any of these isolating intervals 
up to a precision of L bits is in Osid^T + dL). 

Lemma 18 f |Rum79[ Theorem 4]). Let the minimum root separation bound of f (or simply 
the separation bound of f) be the minimum distance between two different complex roots of f : 
ssp{f) = miuj-^ 5 roots of f, 77^(5} ~ One has sep{f) > l/(2(i'^/^+^((i2'^ + l)"*); which yields 
sepif) > 2-o(''^). 

^Theorem 10 of |Sagl2| states that isolating the real roots of / and refining all the isolating intervals up 
to a precision of L bits can be done with Ofl((i^r + d^L) bit operations. However, its proof establishes the 
stronger result, which we stated in Lemma ll7l Note that the proof is currently only available in the manuscript 
corresponding to |Sagl2| which is available on the author's webpage. 
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4.1 Computation of isolating boxes 

By Definition O tlie RUR of an ideal / defines a mapping between the roots of a univariate 
polynomial and the solutions of /, which yields an algorithm to compute isolating boxes. Given 
a RUR of the ideal /, {fi.a, fi,a,i, fi,a,x, fi,a,Y}, isolating boxes for the real solutions can be 
computed by first computing isolating intervals for the real roots of the univariate polynomial 
fi a and then, evaluating the rational fractions and yf-^ by interval arithmetic. However, 

for the simplicity of the proof, instead of evaluating by interval arithmetic each of these fractions 
of polynomials, we instead compute the product of its numerator with the inverted denominator 
modulo fi^a, and then evaluate this resulting polynomial on the isolating intervals of the real 
roots of fj^a (note that we obtain the same complexity bound if we directly evaluate the fractions, 
but the proof is more technical, although not difhcult, and we omit it here). When these isolating 
intervals are sufficiently refined, the computed boxes are necessarily disjoint and thus isolating. 
The following proposition analyzes the bit complexity of this algorithm. 

Proposition 19. Given a RUR of {P,Q), isolating boxes for the solutions of {P,Q) can be 
computed in Ob{<P + cCt) bit operations, where d bounds the total degree of P and Q, and t 
bounds the bitsize of their coefficients. The vertices of these boxes have bitsize in OidPr). 

Proof. For every real solution a of / = {P,Q), let Jx,a x JY,a be a box containing it. A 
sufficient condition for these boxes to be isolating is that the width of every interval Jx,a and 
JY,a is less than half the separation bound of the resultant of P and Q with respect to X 
and y, respectively. Such a resultant has degree at most 2d^ and bitsize in 0{dT) by [BPR06J 
Proposition 8.46]. LemmafTSlthus yields a lower bound of 2~'^ with e in 0{d^T) on the separating 
bound of such a resultant. It is thus sufficient to compute, for every a, a box Jx,a x Jy.a that 
contains a and such that the widths of these intervals are smaller than half of 2^*^. For clarity 
and technical reasons, we define e' = e + 2. In fact, an explicit value of e is not needed to 
compute isolating boxes since the algorithm uses adaptive refinements of the boxes and a test 
of box disjointness. On the other hand, an explicit value of e will be used to reduce the bitsize 
of the box endpoints and an asymptotic estimate will be used for the complexity analysis. More 
precisely, the algorithm proceeds as follows. First, the real roots of // a are isolated. Then, we 
refine these intervals and, during the refinement, we routinely evaluate the polynomials of the 
mapping at these intervals, and we stop when all the resulting boxes are pair wise disjoint. It is 
of course critical not to evaluate the polynomials of the mapping to often; for every real root of 
//.aj we perform these evaluations every time the number of identical consecutive first bits of the 
two interval boundaries doubles or, in other words, every time the width of the interval becomes 
smaller than 2^^ for some positive integer k. 

According to Definitional given a RUR {fi,a,fi,a,i,fi,a,x,fi,a,Y} of /, the mapping 7 t-^ 
( /j"^ (7), yf^il)^ defines a one-to-one correspondence between the real roots of fi^a and those 
of /. Thus every isolating interval of the real roots of fi^a is mapped through this mapping to 
a box that contains the corresponding solution of /. We first show how to modify this rational 
mapping into a polynomial one. Second, we bound, in terms of the width of J^, the side length 
of the box obtained by interval arithmetic as the image of through the mapping. We will then 
deduce an upper bound on the width of that ensures that the side length of its box image is 
less than 2~^ . This thus gives a worst-case refinement precision on the isolating intervals of fi^a 
for the boxes to be disjoint. We then analyze the complexity of the proposed algorithm. 

Polynomial mapping. By Proposition [3 the polynomials fj^a and //,a,i are coprime and thus 
fi,a,i is invertible modulo //^a- The rational mapping can thus be transformed into a polynomial 
one by replacing by mod //,a- Since jp— j- and its inverse modulo fj^ coincide when 
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fi^a vanishes (by Bezout's identity), this polynomial mapping still maps the real roots of //.a to 
those of /. 

This polynomial mapping can be computed in Osid^ +d^T) bit operations and these polyno- 
mials have degree less than Ad"^ and bitsize in 0{d'^ + d^r). Indeed, the bit complexity of comput- 
ing the inverse jj-'— j- modulo fi^a is soft linear in the square of their maximum degree times their 

maximum bitsize |vzGG99l Corollary ll.ll(ii)]Q which yields a complexity of O Biid^Y' {d^ + dr)) 
by Theorem ini The bitsize of this inverse is soft linear in the product of their maximum degree 
and maximum bitsize |vzGG99l Corollary 6.52], that is 0{d'^{d'^ + dT)). Furthermore, the product 
of this inverse and of fi^a,x or fi^a,Y can also be done with a bit complexity that is soft linear 
in the product of their maximum degree and maximum bitsize |vzGG99l Corollary 8.27], that 
is in Osid^id'^ + cPt)). This concludes the proof of the claim since the degree of the inverse 
modulo //.a is less than that of //_q and all the polynomials of the RUR have degrees at most 
d^ by Theorem [S] 

Width expansion through interval arithmetic evaluation. We recall a standard straightforward 
property of interval arithmetic for polynomial evaluation. We consider here exact interval arith- 
metic, that is, the arithmetic operations on the interval boundaries are considered exact. Let 
J = [a, b] be an interval with rational endpoints such that max(|a|, |5|) ^ 2°' and let / G Z[T] be a 
polynomial of degree df with coefficients of bitsize t/. Denoting the width of J by w( J) — \b — a\, 
f{J) can be evaluated by interval arithmetic into an interval /□(J) whose width is at most 
2-^f+df'^djw{J) (see e.g. |CLP+10[ Lemma 8])| In other words, if w{J) 2-^'-^/-'^/'"-2iogd/^ 

then w(/n(J)) 2-"'. 

We now apply this property on the polynomials of the mapping evaluated on isolating intervals 
of fi,a- We denote by df and Tf the maximum degree and bitsize of the polynomials of the 
mapping; as shown above df < Ad^ and Tf G 0{d'^ + d^r). The polynomial fi^a has bitsize Tfj ^ 
in 0{d^ ~\- dr) (Theorem IB]) , thus, by Cauchy's bound (see e.g. YapOO| §6.2]), the maximum 
absolute value of its roots is smaller than 1 -|- 2^^^^." . Considering intervals of isolation for //.q 
whose widths are bounded by a constant, we thus have that the rnaximum absolute value of the 
boundaries of the isolating intervals are smaller than 2'^ with a = 0{d^ +dT). Now, consider any 
isolating interval of fj^a of width less than 2^^ -Tf-dfa-2iogdf _ rpj-^g above property implies that 
we can evaluate by interval arithmetic the polynomials of the mapping on any such intervals and 
obtain an interval of width less than 2~'^ . In other words, the worst-case refinement precision 
of the isolating intervals of fi^a for the boxes to be disjoint is L — e' + Tf + dfa + 2\ogdf. In 
addition, since e' is in 0((i^r), L is in 0((i* + d^T). 



Analysis of the algorithm. For isolation and refinement, we consider the polynomial pp{fi^a), 



^ lvzGG99l Corollary ll.ll(ii)] applies because this inverse is the cofactor of //,a,i in the last line of the 
extended Euclidean algorithm corresponding to the resultant of // ^ i and fx a- Note that this assumes that 
fl,a,i and fia have integer coefficients but this is not an issue because, by Proposition ^2] all polynomials of the 
RUR can be transformed into integer polynomials with the same asymptotic bitsize by multiplying them by one 
and the same integer. 

*For completeness, we recall the proof which is rather straightforward. We apply basic formulas for the sum and 
the product of intervals IAH83I Theorem 9, p. 15]. For any real number a and integer n ^ 1, w{A ± B) = w{A) + 

w{B), w{aA) = \a\w{A), w{AB) ^ w{A)\B\ + \A\w{B), and to(A") ^ n\A\"''^w{A). Writing /(T) = Yltlo '^i^' 
with \ci\ ^ , we have 

df df 

1—1 i— 1 i—l 

^ 2^/«)(J)4max(l, |J|''/~^) ^ 2'^fw{J)dj2''f'^. 
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instead of fi a, which is also of degree bounded by cP and bitsize in 0{cP + dr). Indeed, Proposi- 
tion [12] imphes that the integer polynomial pp{fi^a) has bitsize in 0{d^ -t-dr) and Lemma [T] yields 
that its squarefree part (which the gcd-free part of itself and its derivative) is of the same bitsize 
and can be computed in 0{d^ + d^r). According to Lemma [T71 the first step of the algorithm, 
the isolation of the roots of pp{fi,a) can be done in Osid^ + d^T) bit operations. Then, according 
to the above discussion, these roots will be refined to a maximum precision L = 0{d'^ + d^r). 
Again, Lemma [T7I vields a complexity of dB{{d'^Y{d^ + dr) + {d'^YL) = Osid^ + d'^r) for all 
these refinements. 

It remains to analyze the cost of the evaluations of the mapping and the cost of the box- 
disjointness tests. For a given root, an evaluation of the polynomials of the mapping is performed 
each time its isolating interval precision is doubled, the number of evaluations is thus logarithmic 
in the maximum precision reached, that is L. One evaluation by interval arithmetic of the 
polynomials of the mapping, which have degree 0{d^) and bitsize 0{d'^ + d^r), on one isolating 
intervals whose endpoints have bitsize at most L G 0{d'^ + d'^T) can be done in Osid^id'^ + d'^T)) 
bit operations by Lenima[3]and the resulting intervals have endpoints of bitsize in 0{d'^{d'^+d'^T)). 
The cost of the O(logL) evaluations for the 0{d^) roots is then in Osid^ + d^r). Moreover, the 
algorithm requires testing O(logL) times whether some of the 0{d'^) boxes intersect, which can 
be done, in total, with O(logL) times 0(dP) arithmetic operations (see e.g. [ZE021 §3]) and thus 
with Ob{(P -l-d'^ t) bit operations since the vertices of the box vertices have bitsize in 0{d^ +d^T). 

Therefore, we can compute isolating boxes for the solutions of {P,Q) in Osid^ + d'^r) bit 
operations, and the box vertices have bitsize in Osid^ + d^r). 

Bitsize of the box vertices. We finally show how to compute, from the isolated boxes with 
vertices of bitsize in 0{d^ + d^r), some larger isolating boxes whose vertices have bitsize in 
0{d^T). The method is identical for the X or the F-coordinates of the boxes, thus we only 
consider the a;-coordinates. We iteratively refine the boxes as describe above except that, once 
none of the boxes intersect, we carry on with the iterative refinement of the boxes until the 
distance in X between any two boxes that do not overlap in X is larger than ^2~^ where e, as 
defined at the beginning of the proof, is such that the distance between any two roots of the 
resultant of P and Q with respect to X is at least 2~^; we use here an explicit value for e which 
is given by Lemma 1181 On the other hand, if we were to refine all the boxes until their width 
are less than 2^^ = -jS"^, the distance between any two boxes that do not overlap in X would 
be ensured to be larger than ^2~^. Hence the above analysis of the algorithm still applies since 
we considered that all boxes could be refined until their width (and height) do not exceed 2~^ . 

Now, for every box. all the other boxes that do not overlap in X are at distance more than 
\2~^ in X (before enlargement), so the considered box can be enlarged in X using coordinates 
in intervals of length at least jl^^ on the left and on the right sides of the box. We conclude 
the argument by noting that, given any such interval [a, b] of width at least 2^^ with e' ~ 
e + 2 e 0{d^T) and such that \a\ and |6| are smaller than 2°' with a — 0{(P + dr) (by Cauchy 
bound, as noted above), we can easily compute in that interval a rational of bitsize at most 
e' + aeO(d3r)I!| □ 

®A rational of bitsize at most e' + a can be constructed as follows. We can assume without loss of generality 
that a and b are both positive since the case where they are both negative is symmetric and, otherwise, the 
problem is trivial. Let qf^ be the truncation of b after the fc-th digits of the mantissa, i.e. gj. = [62*J2~'^, and let 
fci be the smallest nonnegative integer such that gj^j^ ^ a. By construction qj.^ G [a, b\ and we prove that its bitsize 
is at most e' + a. If fci = 0, = [bj ^ 2°^ thus g^j^ has bitsize at most a. Otherwise, with fco = fci — 1, we have 
gfc(, < a which implies that b - qk„ > b~a^ 2'^' . On the other hand, b - q^,^ = 2-'=o(;,2*o - [62''oJ) < 2-'=o, 
thus 2~'^ < 2~''o and e' > ko- It follows that the bitsize of gjj^, which is fci plus the bitsize of [fej, is less than 
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Remark 20. It is straightforward that the above proof and proposition also hold if a parameter- 
ization of Gonzalez- Vega and El Kahoui lGVEK96j is given instead of a RUR. 

4.2 Sign of a polynomial at the solutions of a system 

This section addresses the problem of computing the sign (+, — or 0) of a given polynomial F 
at the solutions of a bivariate system defined by two polynomials P and Q. We consider in the 
following that all input polynomials, P, Q and F are in Z[X, y], have degree at most d and 
coefficients of bitsize at most t. We assume without loss of generality that the bound d is even. 
Recall that, as mentioned in the introduction, the best known complexity for this problem is to 
our knowledge Osid^'^ + d^r) for the sign at one real solution and Osid^^ + d^^r) for the sign 
at all the solutions (see |DET09[ Th. 14 & Cor. 24] with the improvement of |Sagl2| for the 
root isolation). We first describe a naive RUR-based sign_at algorithm for computing the sign 
at one real solution of the system, which runs in OsidP + d^r) time. Then, using properties of 
generalized Sturm sequences, we analyze a more efficient algorithm that runs in Osid^ + d'^r) 
time. We also show that the sign of F at the 0{d^) solutions of the system can be computed in 
only 0{d) times that for one real solution. 

Once the RUR {//,a, //,a,i, fi.a.x, //.a.y} of / = {P, Q) is computed, we can use it to translate 
a bivariate sign computation into a univariate sign computation. Indeed, let F{X, Y) be the 
polynomial to be evaluated at the solution (a, /3) of / that is the image of the root 7 of fi^a 
by the RUR mapping. We first define the polynomial fpiT) roughly as the numerator of the 
rational fraction obtained by substituting X = ^^^"-^^^^^ and Y — in the polynomial 

F{X,Y), so that the sign of F{a,(3) is the same as that of fpil)- 

Lemma 21. The primitive par^ of /f(T) = //.a.i(r)i^(r - aY,Y), with Y = jff^, has 

degree 0{d'^), bitsize in 0{d^ + d^r), and it can be computed with Osid'^ + d^r) bit operations. 
The sign of F at a real solution of I = {P,Q) is equal to the sign ofpp{ fp) at the corresponding 
root of fia via the mapping of the RUR. 

Proof We first compute the polynomial F(T-aY, Y) in the form J^Lo ai{T)Y\ Then, fpiT) is 
equal to Yli=o 0'i{T)fi,a,Y{TYfi^a,i{TY~^. Consequently, computing an expanded form of fF{T) 
can be done by computing the ai(T), the powers fi,a,Y{Ty and fi,a,i{Ty, and their appropriate 
products and sum. 

Computing ai{T). According to Lemma 21 P{T — SY, Y) can be expanded with Osid'^ + d^r) 
bit operations and its bitsize is in 0{d + t). These bounds also apply to F{T — SY, Y) and we 
deduce F{T - aY,Y) by substituting S by a. Writing F(T - SY,Y) = E^=o /*(^' the 
computation of F{T — aY,Y) can be done by computing and summing the fi{T,Y)a^. Since a 
has bitsize in 0(logc?) by hypothesis, a* has bitsize in 0{d\ogd) C 0{d), and computing all the 
a* can be done with Osid^) bit operations. For each a', computing fi{T, Y)a^ can be done with 
0{d^) multiplications between integers of bitsize in 0{d -\- t), and thus with Osid^id + r)) bit 
operations. Thus, computing all the fi{T,Y)a^ can be done with OB{d'^{d-\- r)) bit operations, 
and summing, for every of the 0{d^) monomials in (T, Y), d coefficients (corresponding to every 
i) of bitsize in 0{d + r) can also be done with Osid^id + t)) bit operations, in total. It follows 
that, F{T — aY, Y) and thus all the ai{T) can be computed with Osid'^ + d^T) bit operations. 

e' + 1 plus (T. 

^'^See definition in Section 13.21 
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Computing fi,a,Y{Ty and fi,a,i{Ty. fi.a.Y{T) has degree 0{dP) and bitsize 0{<P + dr) (by 
Theorem in]) , thus fi,a,Y{Ty has degree in 0{d'^) and bitsize in 0{d'^ + d^r). Computing aU the 
fi,a,Y{Ty can be done with 0{d) muhiphcations between these polynomials. Every multiplica- 
tion can be done with a bit complexity that is soft linear in the product of the maximum degrees 
and maximum bitsizes |vzGG99i Corollary 8.27], thus all the multiplications can be done with 
Os((i^((i^ + d'^r)) bit operations in total. It follows that all the fi.a.Y{Ty, and similarly all the 
fi.a,i{Ty, can be computed using Osid'^ + d^T) bit operations and their bitsize is in 0{d^ + d^T). 

Computing fp{T). Computing ai{T) fj ^a,Y{Ty fi ^a,i{T)'''^\ for i = 0, . . . ,d, amounts to mul- 
tiplying 0(d) times, univariate polynomials of degree 0{d'^) and bitsize 0{d^ + d^r), which can 
be done, similarly as above, with 0(d^ -I- d^r) bit operations. Finally, their sum is the sum of 
d univariate polynomials of degree 0{d^) and bitsize 0{d^ + d'^r), which can also be computed 
within the same bit complexity. Hence, friT) can be computed with Osid'^ + d^T) bit operations 
and its coefficients have bitsize in 0{d^ + d'^r). 

Primitive part of fpiT). According to Proposition 1121 there exists an integer r of bitsize in 
0((i^-f dr) such that its product with the RUR polynomials gives polynomials in Z[r] of bitsize in 
0(d2 + dr). Consider the polynomial r'^fpiT) = {rfi^aAT)YF{T ~ aY, Y) with Y = Tjffr^- 
This polynomial has its coefficients in Z since rfi a.Y{T) and rfi^a,i{T) are in Z[T]. Moreover, 
since rfi,a.Y{T) and rfi^a,i{T) have bitsize in 0{d^ -l-dr), r'^fp[T) can be computed, similarly 
as above, in OB{d'' + d^r) and it has bitsize in OidP' + d'^r). The primitive part of Jf{T) has 
also bitsize in 0{d^ -f d'^r) (since it is smaller than or equal to that of r'^fpiT)) and it can 
be computed from r'^fp(T) with Osid^id^ + cPt)) bit operations by computing 0{d^) gcd of 
coefficients of bitsize d{d^ dV) lYapOOj §2.A.6]. 

Signs of F and fp . It remains to show that the sign of F at a real solution of / = (P, Q) is the 
sign of fp at the corresponding root of // a via the mapping of the RUR. By Definition [Sj there 
is a one-to-one mapping between the roots of and those of / = (P, Q) that maps a root 7 of 
fi^a to a solution (a, /3) = {^jf^, feirS) ^ 1 = a + aP and fpaAl) + 0. For 

any such pair of 7 and (a, /3), fp{^) = ff^,Al)F{^ - afejgj, it^) definition of fp{T), 
and thus fpij) = ff^^ j^(7)F(a, It follows that fp{'y) and F{a,f3) have the same sign since 
fi,a,i{l) 7^ and d is even by hypothesis. □ 



Naive algorithm. The knowledge of a RUR {fi,a,fi,a,i,fi,a,x,fi,a,Y} of / = {P,Q) yields 
a straightforward algorithm for computing the sign of P at a real solution of /. Indeed, it 
is sufficient to isolate the real roots of fja, so that the intervals are also isolating for fi^afp, 
and then to evaluate the sign of fp at the endpoints of these isolating intervals. We analyze the 
complexity of this straightforward algorithm before describing our more subtle and more efficient 
algorithm. We provide this analysis for several reasons: first it answers a natural question, second 
it shows that even a RUR-based naive algorithm performs better than the state of the art. 

Lemma 22. Civen a RUR {fi,a,fi,a,i,fi,a,x,fi,a,Y} of I — {P,Q) (satisfying the hounds of 
Theorem\d\) and an isolating interval for a real root 7 of fi^a, the sign of F at the real solution 
of I that corresponds to 7 can he computed with Osid^ + d^r) hit operations. 

Proof. By Lemma ppifp) has degree 0{d'^) and bitsize 0{d^ + d'^T), and it can be computed 
with Ob(o?^ -I- d^r) bit operations. By TheoremlHl fi.a has degree 0{d^) and bitsize 0{d^ + dr), 
thus the product pp{fp) fi,a has degree 0{d'^) and bitsize 0{d^ + d^r). By Lemma [T51 the 
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root separation bound of ppifp) fi.a has bitsize 0{d^ + d^r). We refine the isolating interval 
of 7 for fi^a to the precision of the root separation bound of ppifp) fi,a, which can be done 
with dB{{d^ f{d^ + dr) + d^{d^ + d^r)) = Osid^ + d'^r) bit operations according to Lemma [T71 
Furthermore, we can ensure that the new interval has rational endpoints with bitsize 0{d^ +d^T), 
similarly as in the proof of Proposition 1191 On the other hand, by Lemma [TJ since ppifp) has 
bitsize 0{d^ + d'^r), its squarefree part ppifp) can be computed in complexity OB{{d'^)^{d'^ + 
d^r)) = Ob [d^ + d^r) and it has bitsize in Os (d^ + d'^r). It then follows from Lemma[2]that the 
evaluation of ppifp) at the boundaries of the refined interval can be done with OB{d^{d^ + d^T)) 
bit operations which concludes the proof by Lemma HU □ 

Improved algorithm. Our more subtle algorithm is, in essence the one presented by Diochnos 
et al. for evaluating the sign of a univariate polynomial (here pp{fp)) at the roots of a squarefree 
univariate polynomial (here //,a) [DET09, Corollary 5]. The idea of this algorithm comes orig- 
inally from |LR01| . where the Cauchy index of two polynomials is computed by means of sign 
variations of a particular remainder sequence called the Sylvester-Habicht sequence. In |DET09| . 
this approach is slightly adapted to deduce the sign from the Cauchy index ( [YapOO[ Theorem 
7.3]) and the bit complexity is given in terms of the two initial degrees and bitsizes. Unfortu- 
nately, the corresponding proof is problematic because the authors refer to two complexity results 
for computing parts of the Sylvester-Habicht sequences and none of them actually applieslHI Fol- 
lowing the spirit of their approach, we present in Lemma [23] a new (weaker) complexity result for 
evaluating the sign of a univariate polynomial at the roots of a squarefree univariate polynomial. 
This result is used to derive the bit complexity of evaluating the sign of a bivariate polynomial 
at the roots of the system. For clarity, we postpone the proof of this lemma to Section |4 . 2 . 1 1 after 
Theorem mi 

Lemma 23. Let f G Z[X] he a squarefree polynomial of degree df and bitsize Tf, and (a, &) he 
an isolating interval of one of its real roots 7 with a and b distinct rationals of bitsize in 0{dfTf) 
and f{a)f{b) 7^ 0. Let g G he of degree dg and bitsize Tg. The sign of g{'^) can be computed 

in OB{{d^f + ("^z ~^ d,fdg)Tg) hit operations. The sign of g at all the real roots of f can he 

computed with OB{{d'j + d^^dg -t- d'^)Tf + {d'j + dfdg)Tg) hit operations. 

Theorem 24. Given a RUR {fi,a,fi,a,i,fi,a,x,fi,a,Y} of I ~ {P,Q) (satisfying the bounds of 
Theorem\B\), the sign of F at a real solution of I can be computed with OB{d^ ^d"^ t) bit operations. 
The sign of F at all the solutions of I can be computed with Ob{<P + d^r) bit operations. 

Proof. By Lemma [^T] the sign of F at the real solutions of /, is equal to the sign of ppifp) at 
the corresponding roots of //,a, or equivalently at those of pp{fi^a)- Furthermore, pp{fp) has 
degree 0{d^), bitsize in 0{d^ -I- d^r), and it can be computed with OB{d'' + d^r) bit operations. 
On the other hand, by Theorem [S] and Proposition WR the primitive part of fi^a has degree at 
most d^ and bitsize in 0{d^ -\- dr). Since fja is monic (see Equation ([3])), its primitive part can 
be computed by multiplying it by the 1cm of the denominators of its coefficients. This 1cm can 
be computed with 0{d^) Icms of integers whose bitsizes remain in 0{d^ +dT) (since fj ^ is monic 
and its primitive part has bitsize in 0{d^ + dT)). Each 1cm can be computed with Osid'^ + dT) bit 

^^Precisely, their proof is based on their Proposition 1 which claims, based on ILR01| and IRei97l that given 
two polynomials / and g of degree p > q and bitsize in 0(t), any of their polynomial subresultants as well as the 
whole quotient chain corresponding to the subresultant sequence can be computed with Os{pgT) bit operations. 
However, in ILROll the complexity results are not stated in terms of p and q but only in terms of the maximum 
degree while in IRei97l . the result assumes that the {q — 1)*'* subresultant of / and g is known. 
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operations |YapOO[ §2. A. 6], thus pp{fi^a) can be computed in 0{d'^ + (Pt) bit operations^ The 
squarefree part of pp{fi,a) can thus be computed in OB{d'^{<P + dr)) bit operations and it has 
bitsize in 0{d^ + o?t), by Lemma [TJ By Lemmas [T71 and [T51 the isolating intervals (if not given) 
of pp{fi,a) can be computed in OB{{d^)^{d'^ + dr)) bit operations with intervals boundaries of 
bitsize satisfying the hypotheses of Lemma [531 Indeed, we can ensure during the isolation of the 
roots of / = pp{fi,a) that the isolating intervals have endpoints with bitsize in 0{dfTf), similarly 
as in the proof of Proposition (THl Applying Lemma [53] then concludes the proof. □ 

Remark 25. Theorem \24\ holds also if the solutions of I — {P,Q) are described by the rational 
parameterization of Gonzalez-Vega and El Kahoui \GVEK90^ instead of a RUR. Indeed, such 
parameterization is defined, in the worst case, by 0(d) univariate polynomials fi of degree df- 
whose sum df is at most d^ , and by associated rational one-to-one mappings which are defined, 
as for the RUR, by polynomials of degree 0{d^) and bitsize 0{d^ -[-dr). The result of Theorem \24\ 
on the sign of F at one real solution of I thus trivially still holds. For the sign of F at all real 
solutions of I the result also holds from the following observation. In the proofs of Lemmas \26] 
and \23\. the computation of one sequence of unevaluated Sylvester-Habicht transition matrices has 
complexity Ob{pII) (in proof of Lemma l^} where p is in 0{df. + dg) in the proof of Lemma l^R 
The sum of the pH over all i is thus 0{{df + ddg)II) instead of 0{{df + dg)II) as for the RUR. 
However, dgll writes in the proof of Lemma\^as 0{dg((df -\-dg)Tf + df(Tf +Tg))) = 0{dfdg(Tf 
Tg) + dgTf) which writes in the proof of Theorem \24\ as 0{d'^d^{d^ + d^r) + (d^)^(d^ + dr)) — 
0{d^ + d'^r). Thus multiplying this by d remains within the targeted bit complexity. On the 
other hand, the complexity of the evaluation phase in the proofs of Lemmas \26] and \^ does not 
increase when considering the representation of Gonzalez-Vega and El Kahoui instead of the RUR 
because the total complexity of the evaluations depends only on the number of solutions at which 
we evaluate the sign of the other polynomial and on the degree and bitsize of the polynomials 
involved, and both of them are in the same complexity in both representations ( only the number 
of polynomials is larger in Gonzalez-Vega and El Kahoui representation). 

4.2.1 Proof of Lemma [23l 

As shown in |BPR06[ Theorem 2.61], the sign of 5(7) is V{SRemS{f, f'g; a, b)) where V{SRemS{P, 
Q;a,b)) is the number of sign variations in the signed remainder sequence of P and Q evalu- 
ated at a minus the number of sign variations in this sequence evaluated at b (see Definition 
1.7 in |BPR06| for the sequence and Notation 2.32 for the sign variation). On the other hand, 
for any P and Q such that deg(P) > deg(Q) and P{a) P{b) ^ or Q{a)Q{b) ^ 0, we have 
according to |Roy96[ Theorems 3.2, 3.18 & Remarks 3.9, 3.250 that V{SRemS{P,Q;a,b)) = 
W{SylII{P, Q; a, b)) where SylH is the Sylvester-Habicht sequence of P and Q, and W is the 
related sign variation function^ The following intermediate result is a consequence of an adap- 
tation of |LR01[ Theorem 5.2] in the case where the polynomials P and Q have different degrees 
and bitsizes. 

^■^Note that is if // a has been computed using Proposition[7] then instead of computing pp(//,a) one can consider 
R(T, a) = fi^a{T) Lii(a) which is a polynomial of degree 0{d?) with integer coefficients of bitsize 0{d? + dr) by 
Lemma |4] 

^''The same result can be found directly stated, in French, in ILom90l Theorem 4]. 

^^The Sylvester-Habicht sequence, defined in BPR06 §8.3.2.2] as the Signed Subresultant sequence, can be 
derived from the classical subresultant sequence [EK03 by multiplying the two starting subresultants by +1 the 
next two by —1 and so on. W is defined as the usual sign variation with the following modification for groups of 
two consecutive zeros: count one sign variation for the groups 0, 0, — ] and [— , 0, 0, +], and two sign variations 
for the [-|-,0, 0, +] and [-,0,0, -] (see IBPR06I §9.1.3 Notation 9.11]). 
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Lemma 26. Let P and Q in with deg{P) ~ p > q = deg{Q) and bitsize respectively Tp, tq. 

If a and b are two rational numbers of bitsize bounded by a , the computation ofW{SylH(P, Q; a, b)) 
can be performed with Ob{{p + <Z^)o' + p(ptq + QTp)) bit operations. 

Moreover, if ai and bi, 1 ^ £ ^ u, are rational numbers of bitsizes that sum to a, the 
computation ofW{SylH(P,Q]ai,bi)) can be performed for alii with OBiip+q^)o'+{p+qu){pTQ + 
QTp) + puTp) bit operations. 

Proof. Following the algorithm in |LR01| . we first compute the consecutive Sylvester-Habicht 
transition matrices of P and Q denoted by Afj^i with ^ j < i ^ p. These matrices link 
consecutive regular co 

uplesEI {Sh„Shi_i) and (shj,Shj^i) in the Sylvester-Habicht sequence 

as follows: 

(y^^L^ ) ~ -^j-i (^^f^^ ^ such that i ^p and {Shp, Shp^i) = {P,Q). (9) 

According to [LROll Theorem. 5.2 & Corollary 5.2], computing all the matrices Mj^i of P and 
Q can be done with OsipH) bit operations, where H G 0{qTp + prg) is an upper bound on the 
bitsize appearing in the computations given by Hadamard's inequality. 

We evaluate the Sylvester-Habicht sequence at a rational a by first evaluating P, Q, and all 
the matrices Afj^i at a, and then by applying iteratively the above formula. Doing the same at b 
yields W{SylH[p, Q; a, b)). 

First, note that the evaluation of P{a) and Q{a) can be done with Ob{p{tp + a)) plus 
Os(g(TQ + cr)), that is Ob{p{tp + tq + a)) bit operations (since p > q), by Lemma [31 The 
polynomials appearing in the matrices Afj.i have bitsize at most H and the sum of their degrees 
is equal to p |LR01[ Corollary 4.3]0 Thus, all A/}.i(a) have bitsize 0{pa + H) and they can be 
computed in a total of Ob{p{c + H)) bit operations, by Lemma [31 Moreover, by considering 
the matrices Mj^i other than the first one A/fe,p, as the consecutive transition matrices of the 
Sylvester-Habicht sequence of the first regular couple {Shk, Sh^-i) after [Shp, Shp^i), we have 
that the polynomials appearing in these matrices have the sum of their degrees equal to that of 
Shk which is at most q (since fc ^ p — 1 and S'/ip-i ~ Q). Thus, except the first one Mk.p{a), 
all evaluated matrices N'j^iia) have bitsize 0{qa + H) and they can be computed in a total of 
OB[q[cr -\- H)) bit operations. 

We now apply iteratively Equation ([9]) for computing all the Shi{a). Since all Sylvester- 
Habicht polynomials have bitsize at most H and degree at most q except the first one Shp = P, 
the bitsize of Shi^p{a) is in 0{q(T + H) and that of Shp{a) is in 0{pcr + Tp). Given P{a), Q(a) 
and all Afj^i (a) , it follows from their bitsizes that we can compute iteratively the Shi (a) in time 
Ob{p<^ + H) for the first regular couple after {Shp, Shp^i) — {P,Q) and in time OB{qcr + H) 
for each of the others. Thus, for computing of W{SylH{P,Q;a,b)), the initial computation of 
all Afj^i takes Ob{pH) bit operations and the evaluation phase takes Ob{p{tp + tq + a)) plus 
OB{p{<^+H)+q{qa+H)) bit operations, which gives a total of OB{p{(y+P[) + (f'cr) bit operations. 

We now consider the case of computing W{SylH{P,Q;ai,bi)) for 1 ^ £ ^ u. We slightly 
change the above algorithm as follows. We only change the way to evaluate the first regular couple 
{Shk, Shk~i) after {Shp, Shp-i) at the a£ (and bi). Once the matrices Afjj have been computed, 

^^Regular couples in the Sylvester-Habicht sequence are the nonzero Sylvester-Habicht polynomials (Shi, Shi—i) 
such that deg{Shi) > deg(S/ii_i). 

^^ ILROll Corollary 4.3] states that consecutive Sylvester-Habicht transition matrices consist of one zero, two 
integers and a polynomial which is, up to a coefficient, the quotient of the division of two consecutive Sylvester- 
Habicht polynomials. These polynomials being proportional to polynomials in the remainder sequence of (P, Q), 
the sum of the degrees of their quotients is equal to the degree of P. 
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we compute the (non-evaluated) first regular couple {Shk, Shk~i) — J\fk.p{Shp, Shp-i). Since the 
polynomials in Mk.p have degree at most p and bitsize at most H , the couple {Shk, Shk-i) can 
be computed in Ob{p{H + Tp + tq)) = Ob{pH) time |vzGG99l Corollary 8.27]. As noted above, 
Shk^ and thus also Shk-i, have degree at most q and they have bitsize at most H, so they can be 
evaluated at a given ae in time OB(g(cr£ + i/)) where ai is the bitsize of ag. Now, the polynomials 
appearing in the matrices Afj^i, other than the first one Mk.p, have bitsize at most H and the 
sum of their degrees is at most g, so similarly as above, all the Mj^i(af), except Afk,pio-e), can be 
computed in total bit complexity OB^qisn + H)). Then, we compute as above each of the other 
regular couples evaluated at in time Osiqo'i + H). Hence, the initial computation of all Mj^i 
and of {Shk, Shk-i) takes Ob{pH) bit operations and the evaluation phase at all the ai takes the 
sum over ^, 1 ^ £ < u, of Ob{p{tp + tq + ai)) plus OB{q{cre + H) + q{qcre + Hj) bit operations, 
that is Ob{p{tp + tq) + {p + q^)(Je + qH) which sums to Ob{pu{tp + tq) + [p + q^)(J + quH). 
Hence the total bit complexity for computing all the W{SylH{P,Q; a^,bi)) for 1 ^ ^ ^ u is 
Ob{{p + q^)<J + (p + qu)H + puTp) which concludes the proof. □ 

Proof of Lemma \2kA We may assume that g has degree greater than one since, if 5 is a constant 
the problem is trivial and, if g{X) — cX ~ d, then the sign of 3(7) follows from (i) the sign of c if 
I ^ (a, h) and from (ii) the signs of c, /(a), and /(|) if f € (a, &); indeed, the signs of /(a) ^ 
and /(f) determine whether 7 lies in (a, |), {|}, or (f ,&)■ Hence, when g has degree one, the 
sign of 5(7) can be computed with OB{df{Tg + dfTf)) bit operations according to Lemma|21 

RecaU that the sign of 5(7) is V{SRemS{f, f'g;a,b)) |BPR06[ Theorem 2.61]. When g 
has degree greater than one, we cannot directly apply Lemma [5^] since deg(/) < deg( f'g). 
However, knowing the sign of / and f'g at a and b and noticing that their signed remainder 
sequence starts with [f,f'g,—f,—rem{f'g,—f),...], we can easily compute the value c such 
that V{SRemS{f,f'g;a,b)) — V{SRemS{f'g,—f;a,b)) + c. Furthermore, as observed at the 
beginning of this section and since f{a)f{b) by hypothesis, V{SRemS{f'g, — /; a, 6)) — 
W{SylH{f'g, — /; a, b)). We can now apply Lemma which thus yields the sign of 5(7) with a 
bit complexity in OB{{p+q^)<:r+p{pTQ+qTp)) which simplifies into OB{{d'j+d'^)Tf + {d'j+dfdg)Tg). 

For the sign of g at all the real roots of /, isolating intervals of these roots can be computed 
in complexity OBid'jrf) (see Lemma [T7)) such that the bitsizes of the interval boundaries sum up 

to 0{dj + dfTf) (a consequence of Davenport-Mahler-Mignotte bound, see e.g. [ DET091 Lemma 
6]). Similarly as for one root, Lemma then yields that the sign of g at all the real roots of / 
can be computed with a bit complexity in Ob{{p + q^)'^ + (p + qu){pTQ + qrp) + puTp) which 
writes asdB{idf+dj + d'j)dfTf + {df + dg + d'j){{df+dg)Tf+df{Tf+Tg)) + {df + dg)df{Tg+Tf)) 
and simplifies into OB{{dj: + d^jdg + d'^)Tf + (dj: + dfdg)Tg) bit operations. □ 

4.3 Over-constrained systems 

So far, we focused on systems defined by exactly two coprime polynomials. We now extend our 
results to compute rational parameterizations of zero-dimensional systems defined with additional 
equality or inequality. Let P,QG Y] be two coprime polynomials of total degree at most d 
and maximum bitsize r. In this section, we assume given RURj^a = {fi,a,fi,a,i,fi,a,x,fi,a,Y} 
the RUR of the ideal / — {P, Q) associated to the separating form X -f aY , we also assume that 
the polynomials of this RUR satisfy the bitsize bound of Theorem [HI Given another polynomial 
F £ X[X, y], we have seen in the previous section how to compute the sign of F at the solutions 
of /. With a similar approach, we now explain how to split RURj^a according to whether F 
vanishes or not at the solutions of /. 
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Let F € Z[X, Y] be of total degree at most d and maximum bitsize t. Identifying the roots 
of //,a with the solutions of the system / via the RUR, let fF=o (resp. fp^o) be the squarefree 
factor of fia such that its roots are exactly the solutions of the system / at which the polynomial 
F vanishes (resp. does not vanish). 

Lemma 27. Given RURj^a, the bit complexity of computing /f=o (resp. fp^o) is in Osid^ + 
d'^r) and these polynomials have bitsize in 0{d^ + dr). 

Proof. The polynomial fp (not to be confused with /f=o or fp^o), as defined in Lemma 1211 
has the same sign as F at the real solutions of the system /. The same holds for complex 
solutions by considering the "sign" as zero or nonzero. The roots of the squarefree polynomial 
fp=Q = gcd{fi,a, fp) thus are the a + a/3 with {a, [3) solution of / and F {a, P) = 0. The 
polynomial fp=^o defined as the gcd-free part of with respect to fp is also squarefree and 
encodes the solutions such that F {a, (3) ^ 0. 

According to Lemma [?T1 and the proof of Theorem the primitive part of fp and fi^a can 
be computed in, respectively, OB(d^ + d^r) and OB{d'^{d^ + dr)) bit operations. Moreover, these 
integer polynomials have, respectively, bitsize 0{d^ + d^r) and 0{d^ + dr) and degree 0{d^) 
and 0{d^). Thus, by Lemma [51 their gcd and the gcd-free part of fi^a with respect to fp, i.e. 
/f=o E^nd fp=io, can be computed with Osid^ + d'^r) bit operations and they have bitsize in 



For several equality or inequality constraints, iterating this splitting process gives a param- 
eterization of the corresponding set of constraints. It is worth noticing that the set of poly- 
nomials {fp=o,fi,a,i,fi,a,x,fi,a,Y} defines a rational parameterization of the solutions of the 
ideal (P, Q, F), but this is not a RUR of this ideal (in the sense of Definition [5]) . First, because 
multiplicities are lost in the splitting process and second because the coordinate polynomials of 
the parameterization are still those of the ideal /. Still, it is possible to compute a RUR of the 
radical of the corresponding ideal (and similarly for the ideal corresponding to F ^ 0): 

Proposition 28. Given RURj^a o,nd F G Z[X, Y] of total degree at most d and maximum bitsize 
T, the hit complexity of computing the RUR of the radical of the ideal {P,Q,F) is in Osid^ +d'^ t) . 

Proof. Denote by J the radical of the ideal {P,Q,F). The polynomial fp=Q computed in 
Lemma [?fl is the first polynomial fj^a of RURj^a- Indeed, it vanishes at the solutions of this ideal 
(with identification of the roots of fj^a with the solutions of the system J) and it is squarefree. 
Then Proposition [7] yields that fj^a,i is the gcd-free part of f'j ^ with respect to /j.q. As in the 
proof of Theorem [Ml pp{fj,a) can be computed in Osid'^ + d^r) and has bitsize in 0{d^ -f dr). 
By Lemma[51 applied to pp{f.j.a) and its derivative, fj.a.i can be computed in Osid^ + d^r). 

According to Definition [5l of a RUR, the X-coordinates of the solutions of J are given by 
the polynomial fraction ^jf-^ at the roots of /j.a. On the other hand, the solutions of J, seen 

as solutions of /, have their AT-coordinates defined by the polynomial fraction ^jf-^ ■ This thus 

imphes that/j,a,x = fr.l..ifi,a,xfj,a,i modulo fj^a- The computation of ffl^^ together with 
the multiplication with other polynomials of the RUR has already been studied in the proof of 
Propositionlini this can be done in Osid^ + d^T) time and gives a polynomial of degree 0{d^) and 
bitsize 0(d* -I- d'^r). It remains to compute the remainder of the division of this polynomial with 
which can be done in a soft bit complexity of the order of the square of the maximum degree 
times the maximum bitsize, i.e. Osid^ + d'^T) |vzGG99l Theorem 9.6 and subsequent discussion]. 
A similar computation gives the polynomial fpa.Y^ hence the computation of RURj^a can be 
done in Ob {d^ + d'^r) bit operations. □ 




0{d^ + dT). 



□ 
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5 Conclusion 

We studied the problem of solving systems of bivariate polynomials with integer coefficients 
using Rational Univariate Representations. We first showed that the polynomials of the RUR 
of a system of two polynomials can be expressed by simple formulas which yield a new simple 
method for computing the RUR and also yield a new bound on the bitsize of these polynomials. 
This new bound implies, in particular, that the total space complexity of such RURs is, in the 
worst case, &{d) smaller than the alternative rational parameterization introduced by Gonzalez- 
Vega and El Kahoui |GVEK96] . Given a RUR, this new bound also yields some improvements on 
the complexity of computing isolating boxes and performing sign_at evaluations. Furthermore, 
these improvements also hold for the rational parameterization of Gonzalez- Vega and El Kahoui. 
We also addressed the problem of computing RURs of over-constrained systems. 

The algorithm we presented for computing a RUR is more of a theoretical than a practical 
interest. Indeed, the computation of the resultant R{T, S) of trivariate polynomials in not very 
efficient in practice. One particular problem of interest is thus the design of a practical efficient 
algorithm for computing RURs of bivariate systems whose bit complexity is as close as possible 
to the one presented here. Our complexity analysis shows that our new algorithm for computing 
a RUR is dominated by that of finding a separating form which is in Ob{<P + J^t) |BLPR13] . 
However, in a Monte-Carlo probabilistic setting, one can choose a candidate separating form 
randomly. On the other hand, in a Las- Vegas probabilistic setting, it is also possible to choose a 
candidate separating form randomly, compute a RUR-candidate using multi-modular arithmetic 
and taking advantage of our new bound on its bitsize, and verify a posteriori using the RUR- 
candidate if the chosen candidate separating form is actually separating. Such approach is the 
topic of current research and we refer to [BLPRlT] for preliminary work on the subject. Another 
problem of interest is to generalize our bounds on the bitsize of RURs to higher dimensions. 
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